Identity Manager 9.3 - Attestation Administration Guide

You can assign an Attestors application role to hierarchical roles. When attesting identities, different approval procedures are available to determine which members of this application role are attestors.

AD - Attestor of the primary department of the identity to attest

AD - Attestor of the primary location of the identity to attest

AO - Attestor of the primary business role of the identity to attest

AD - Attestor of the primary cost center of the identity to attest

The following applies for all named approval procedures: Attestors of parent roles are determined if

the primary role is not directly assigned an attestor or
the assigned application role does not have any members.

If still no attestor can be determined, the attestation case is presented to the attestors of the associated role class for approval.

The following applies for the AO approval procedure: Attestors of child business roles are determined if

business role inheritance is bottom-up and
the primary business role is not directly assigned an attestor or
the assigned application role does not have any members.

Related topics

Default approval procedures

Determining attestors via attestation object managers

Managers can be assigned to identities, hierarchical roles, and system roles. Different approval procedures can be used to identify managers as attestors when these objects are attested. If user accounts are linked with identities, their managers can attest these user accounts.

C6 - Proposed manager